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AMENDMENT TO THE CLAIMS 

1-18 (Cancelled) 

19. (New) A computer-implemented process comprising: 

obtaining a set of one or more private values Q ]9 Q 29 ... 9 Q m and respective public values 

G l9 G 29 ... 9 G m9 each pair of keys (Q^G^ verifying either the equation G^Q* = 1 modn or the 

equation G, sg. v modw, wherein m is an integer greater than or equal to 1, i is an integer 
between 1 and m , and wherein n is a public integer equal to the product of. / private prime 
factors designated by />„..., p f , at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2* , wherein £ is a security parameter having an integer value greater than 1, and wherein 
each public value G, (for i = 1,..., m ) is such that G, = g, 2 mo&n 9 wherein g t \ (for /.= l,...,m ) is a 
base number having an integer value greater than 1 and smaller than each of the prime factors 
Pi,...,p f , and wherein, for at least one integer value / between 1 and m, g J or (-g,) is a 

quadratic residue of the body of integers modulo n , and wherein, for at least one integer value s 
between 1 and m , q s is neither congruent to g s mod/? nor congruent to (-g s ) mod a , wherein, 

for i = l,...,/w , q. = £T V/2 modn in the case G, x Q" = 1 mod n and q. = QJ n modn in the case 

G, = Q" mod /? ; and 

using at least the private values 0 19 £? 2 i n an authentication or in a signature 
method. 

20. (New) The computer-implemented process according to claim 19, further comprising: 
receiving a commitment R from a demonstrator, the commitment R having a value 

computed such that: R = r v mod « , wherein r is an integer such that 0 < r < n randomly chosen 
by the demonstrator; 
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selecting m challenges d v d 2 ,...,d m randomly; 
sending the challenges d ly d 2 ,...,d m to the demonstrator; 

receiving a response D from the demonstrator, the response D having a value computed 
such that: D = rxQ dl x Q 2 X x ...xQ m d " mod n ; and 

determining that the demonstrator is authentic if the response D has a value such that: 
D v xG* 1 ** 1 xG 2 ldl x...xG/" modtf is equal to the commitment R, wherein, for / = l,...,m, 
s t = +1 in the case G, x Q. v = 1 mod n and e i = -1 in the case G, = Q* mod n . 

21. (New) The computer-implemented process according to claim 19, further comprising: 
receiving a commitment R from a demonstrator, the commitment \K having a value 

computed using the Chinese remainder method from a set of commitment components ~R r 

wherein j = 1,...,/, each commitment component Rj having a value such that Rj ^r/.mpd pfo) 
wherein r } is an integer such that 0 < r } < p } randomly chosen by the demonstrator; \ -^cr . 

selecting m challenges d x ,d 2 ^d m randomly; 

sending the challenges d x ,d 2 ,„. 9 d m to the demonstrator; 

receiving a response D from the demonstrator, the response D being computed from a 
set of response components D } using the Chinese remainder method, the response components 

Dj having a value such that: D } = r } xQ x ^ xQ 2 / 2 x...xQ m / m mod p } for j = 1,...,/, wherein 
Qu =Qi mod pj for / = l v ..,w and y = 1,...,/; and 

determining that the demonstrator is authentic if the response D has a value such that: 
D v x G x eA x G 2 ldl x ... x G m £mdm mod n is equal to the commitment i?, wherein, for / = l,...,m, 
^ = +1 in the case G # . x Q" = 1 mod w and s i = -1 in the case G, = Q v mod « . 

22. (New) The computer-implemented process according to claim 19, further comprising: 
receiving a token T from a demonstrator, the token T having a value such that 
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T = h(M,R) , wherein h is a function of two integers which makes use of a hash function, M is 
a message received from the demonstrator, and R is a commitment having a value computed 
such that: R = r v mod « , wherein r is an integer such that 0 < r < n randomly chosen by the 
demonstrator; 

selecting m challenges d x ,d 2 ,...,d m randomly; 

sending the challenges d x ,d 2 ,...,d m to the demonstrator; 

receiving a response D from the demonstrator, the response D having a value such that: 
D = rx Q x x x Q 2 dl x ...xQj m mod n ; and 

determining that the message M is authentic if the response D has a value such that: 
h(M 9 D v xG* A xG 2 M2 x...xG; A mod«) is equal to the token T , wherein, for / = l,...,m, 
£, = +1 in the case G y x Q. v = 1 mod n and £ . = -1 in the case G, = Q* mod « . ii * .:: 

23. (New) The computer-implemented process according to claim 19, further comprising:^ ..T: : 
receiving a token 7 from a demonstrator, the token T having a value\ such that: 
7 = h{M , /?) , wherein /z is a function of two integers which makes use of a hash function, M is 
a message received from the demonstrator, and R is a commitment having a value computed 
using the Chinese remainder method from a set of commitment components Rj wherein 

y = l,...,/, each commitment component Rj having a value such that Rj =r/ mod p } , wherein 
rj is an integer such that 0 < r } < p } randomly chosen by the demonstrator; 

selecting m challenges d l9 d 2 ,...,d m randomly; 

sending the challenges d x ,d 2 ,„.,d m to the demonstrator; 

receiving a response D from the demonstrator, the response D being computed from a 
set of response components D } using the Chinese remainder method, the response components 

Dj having a value such that: D } =r } *Q X J X x(? 2 ,/ 2 x - x Q m ,/ m mod p } for y = l,...,/, wherein 
Qij =Qi mod p. for / = m and y = l,...,/; and 
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determining that the message M is authentic if the response D has a value such that: 
/z(m,Z) v xG 1 ^ i xG/ 2</2 x...xG/ a mod*) is equal to the token T , wherein, for z = l,...,ro, 

^ = +1 in the case G, x g. v = 1 mod n and = -1 in the case G, = Q v mod « . 

24. (New) The computer-implemented process according to claim 20, wherein the challenges 
are such that 0 < d, < 2* - 1 for / = l 9 ... 9 m . 

25. (New) A computer-implemented process according to claim 19 for allowing a signatory 
to sign a message M , further comprising: 

selecting randomly m integers r { such that 0 < ^ < n for i = l,...,m ; 

; computing commitments 7?,- having a value such that: R i = r/ mod h , for j = ; 

computing a token T having a value such that T = h(M 9 R l9 R 29 ... 9 R„) , wherein /* is a 

ftmctibn Qf.(w+.l) integers, which makes use of a hash function and produces:^ binary trainer 
consisting of, m. bits; ; . , \ ■ • . ■'■ai.-h'^jvS /;: y 

identifying the bits d l9 d 29 ... 9 d m of the token T ; and 

computing responses D t =r f x Qf' mod n for / = . ...... 

26. (New) The computer-implemented process according to claim 25, further comprising: 
collecting the token T and the responses D i for / = l,...,m ; and 

determining that the message M is authentic if the response D has a value such that: 
h(M,D;xG { £A mod w,£> 2 v xG/ 2 ' 2 mod D m v xG m €mdm modn) is equal to the token 7\ 

wherein, for i = l 9 ... 9 m, £,.=+1 in the case G,x0. v =lmodw and £,=-1 in the case 

G, = Q* mod n . 

27. (New) A system comprising: 
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a memory storing a set of instructions; and 

a processor coupled to the memory for executing the set of instructions stored in the 
memory, the instructions including: 

obtaining a set of one or more private values Q i9 Q 29 — 9 Q m and respective public values 

G x ,G 29 ... 9 G m , each pair of keys (Q i9 G s ) verifying either the equation G g -Q" s 1 modn or the 
equation G, = 0/ modn, wherein m is an integer greater than or equal to 1, i is an integer 
between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p X9 ^,p f , at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2* , wherein k is a security parameter having an integer value greater than 1, and wherein 
- each public value G, (for i = l,...,m ) is such that G i = g, 2 mod/* , wherein g i (for / = ) is a 
' b^e number having an integer value greater than 1 and smaller than 5 ea&feof the prime factors 
Vl,, ; n * ' : p X9 :~ 9 'pj 9 and whereiti, for at least one -integer value / between 1 mdpm : 9 . : g J; or (-gj) is a 
quadratic residue of the body of integers modulo n , and wherein, for at least one integer value s 
between 1 and m , q s is neither congruent to g s mod« nor congruent to (-g s ) modn , wherein, 

for / = l,...,m , q. = Q7 v/2 modn in the case G,. x 0/ = 1 mod n and q i = 0/ /2 mod« in the case 
G, = mod a? ; and 

using at least the private values Q x ,Q 2 , ^Q m in an authentication or in a signature 
method. 

28. (New) A computer-readable storage medium storing instructions which when executed 
cause a processor to execute the following acts: 

obtaining a set of one or more private values Q X9 Q l9 ^ ,Q m and respective public values 

G 1 ,G 2 ,...,G m , each pair of keys (Q i9 G f ) verifying either the equation G, -Q* =1 modn or the 

equation G, sg. v modn, wherein m is an integer greater than or equal to 1, i is an integer 
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between 1 and m , and wherein n is a public integer equal to the product of / private prime 
factors designated by p l9 ... 9 p f , at least two of these prime factors being different from each 
other, wherein / is an integer greater than 1, and wherein v is a public exponent such that 
v = 2* , wherein A: is a security parameter having an integer value greater than 1, and wherein 
each public value G, (for / = is such that G, = g, 2 modn , wherein g. (for i = is a 

base number having an integer value greater than 1 and smaller than each of the prime factors 
Pi,...,p f , and wherein, for at least one integer value / between 1 and m , g t or (-g,) is a 

quadratic residue of the body of integers modulo n , and wherein, for at least one integer value s 
between 1 and m , q s is neither congruent to g s modn nor congruent to (-g s ) modn , wherein, 

for i = 1,..., m , q t = Qj vtl modn in the case G, x Q. v = 1 mod n and = Q] n modn in the case 

G t = Q v mod « ; and 

using at least the private values Q x ,Q 2 ,...,Q m in ah authentication or in _a signature' - 



29. (New) A computer-implemented process for producing asymmetric cryptographic keys, 
said keys comprising m>\ private values Q l9 Q 29 ... 9 Q m and m respective public values 

G l9 G 2 ,...,G m , the computer-implemented process comprising: 

selecting a security parameter k , wherein A: is an integer greater than 1; 
determining a modulus n , wherein n is a public integer equal to the product of at least 
two prime factors p } ,...,p f ; 

selecting m base numbers g l ,g 2 ,~*>g m , wherein each base number g i (for f = l,...,w) 
has an integer value greater than 1 and smaller than each of the prime factors p l9 .~,p /9 and 
wherein, for at least one integer value / between 1 and m , g f or (-g,) is a quadratic residue of 
the body of integers modulo n ; 

calculating the public values G, for i - \,...,m through G,. = g t 2 modn ; and 
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calculating the private values Q 9 for i = l,...,/w by solving either the equation G, -0/ ■ 1 modw 
or the equation G, = Q- mod« , wherein the public exponent v is such that v = 2* , such that, for 
at least one integer value s between 1 and m , q s is neither congruent to g s modw nor 
congruent to (~g s ) mod n , wherein, for i = 1,..., m , = gr v/2 mod n in the case 
G, x 0/ = 1 mod n and = 0, v/2 mod/? in the case G, = Q v mod « . 



